Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363561343a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a363561343a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: BsWPmWpXZusYg76lZONVZU3H/DfV5j0CPusVMfZ0dEU=
Subject key identifier: 4B:CB:7E:4F:35:44:83:95:2F:5A:D8:C0:F6:A1:D2:B1:5D:CC:93:CF
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 213F32A7F9471B8CB44BEB9F35D8478AA29DECF5
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363561343a3a2f34382d3438203d3e203136393039.roa
Signing time: Tue 27 May 2025 06:36:02 +0000
ROA not before: Tue 27 May 2025 06:31:02 +0000
ROA not after: Tue 26 May 2026 06:36:02 +0000
asID: 16909
IP address blocks: 2a14:7584:65a4::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 May 2025 23:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:3f:32:a7:f9:47:1b:8c:b4:4b:eb:9f:35:d8:47:8a:a2:9d:ec:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 27 06:31:02 2025 GMT
Not After : May 26 06:36:02 2026 GMT
Subject: CN=4BCB7E4F354483952F5AD8C0F6A1D2B15DCC93CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:08:41:bd:17:8b:94:1a:38:cb:b4:1c:47:
fa:d4:c4:d9:92:b1:96:09:89:92:2b:2b:24:f8:a3:
b5:bf:9b:6d:2e:d2:24:14:d2:a1:b6:95:4b:a5:fa:
b4:20:ef:00:91:ee:03:d2:90:a2:6e:25:cd:ce:1b:
57:ea:c3:ca:07:60:b4:cd:1e:8a:21:6d:6b:d7:ee:
b8:55:d9:de:c4:c3:69:cf:4c:d8:9a:b2:04:fa:97:
b1:d2:a4:a1:79:61:6e:6b:4d:9d:1a:f7:7d:71:ab:
b4:0a:43:9c:ab:8f:15:e0:c3:ac:a5:46:a7:a4:24:
fa:ee:7d:a9:24:f3:87:eb:ea:e3:27:28:5c:b6:7b:
60:e8:78:e1:8a:16:df:d6:be:bf:08:c8:18:1e:b2:
26:14:dd:f1:56:59:2b:00:0b:c2:14:b0:59:b5:ad:
17:ea:be:a2:7c:a5:f5:db:3d:7d:f0:2f:23:a1:d2:
8d:a4:6f:e1:19:13:71:04:f8:d2:d3:07:29:ff:28:
9d:77:23:ba:f8:f6:8f:87:cb:11:d9:cc:3d:22:7b:
83:cb:e8:29:9c:1a:1e:04:47:97:e6:ed:88:88:66:
3a:aa:cf:d3:7b:d7:2d:ab:33:58:ed:d7:4a:22:36:
a1:6d:2d:25:13:6d:fd:1b:19:46:61:2d:73:27:e2:
fe:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CB:7E:4F:35:44:83:95:2F:5A:D8:C0:F6:A1:D2:B1:5D:CC:93:CF
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a363561343a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:65a4::/48
Signature Algorithm: sha256WithRSAEncryption
30:76:99:17:c4:38:63:84:81:e3:10:c4:4f:bf:7a:54:be:2f:
1f:94:33:eb:1f:7e:eb:04:11:d2:fe:e3:05:f8:89:72:a3:c5:
54:5d:53:d4:3d:0c:f6:67:e4:50:24:5e:ce:82:25:2d:42:4d:
f2:00:58:26:e6:f8:84:a7:cf:39:82:95:ba:d6:8a:36:a4:67:
8c:1b:9b:d0:c4:f1:27:4b:33:88:a5:fe:fb:de:34:2b:00:91:
3a:6e:1c:09:b3:eb:65:ff:6f:16:35:75:71:dc:b0:d0:cb:b6:
8b:87:7e:cd:f5:04:b5:bb:ea:80:5d:ca:f2:7b:ef:4f:ac:ae:
c9:62:a6:1c:bf:d2:a3:f0:66:31:a6:c9:b4:77:22:3c:b7:be:
49:d0:6f:94:5e:79:a2:e4:69:3c:4a:3f:e5:f4:03:4e:74:45:
a7:da:01:dc:f6:80:4a:3d:1f:02:ab:70:be:03:07:0d:6b:53:
f9:9b:bb:1b:30:6e:3a:0d:01:00:80:97:81:5f:63:1e:01:61:
ef:a1:36:42:ab:90:ed:4a:a9:aa:c1:a8:c8:65:97:43:e0:ba:
e7:8c:c5:bc:ef:9d:b2:5a:d9:99:52:f6:0e:ef:b0:0c:0a:8e:
d8:ff:d8:f1:4c:55:59:15:08:7f:15:84:8a:b0:af:3d:9e:01:
b0:ff:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:18:42 2025 by rpki-client